AWS CloudGuard Cluster - Terraform Complete Environment Deployment.

[Shay_Levin]

++  Added support for CloudGuard Cluster Deployment

This is a walkthrough for a terraform configuration that deploys a full environment, including VPC, subnets, routing, ingress routing, Internal and external servers, CloudGuard Management, and Cluster or Single Gateway, configuring the management, creating the SIC and install policy.

Check the video for a detailed guided walkthrough.

The terraform configuration zip file is attached at the bottom of the post.

*** If you experience the following error during the script run:  "Invalid command: "scp -vt /tmp.

      Please wait two minutes and run the deployment again ( terraform apply -auto-approve  )

[jascottebsco]

Is there any updates on using this or similar to deploying autoscaling firewalls? 

[Roman_Kats]

Hi @jascottebsco 

We do have terraform template for deploying Auto Scale Group  of Firewalls with Management and Auto Scale Group of Web Servers

You can find this and many more templates in our github repository:
https://github.com/CheckPointSW/CloudGuardIaaS/tree/master/terraform/aws 

Autoscale:

https://github.com/CheckPointSW/CloudGuardIaaS/tree/master/terraform/aws/qs-autoscale-master 

https://github.com/CheckPointSW/CloudGuardIaaS/tree/master/terraform/aws/qs-autoscale 

[Simon_Macpherso]

@Shay_Levin Thanks. Is the same available for deploying in to Azure? 

[Shay_Levin]

HI,

with most of the assets 

Take a look here: https://github.com/CheckPointSW/CloudGuardIaaS/tree/master/terraform/azure

[Daniel_Kavan]

Thanks Shay!

What if I want to terraform one system to be both a manager and a gw, is that possible with this?  

[Shay_Levin]

Hi, 

It's supported

It's a standalone deployment, you will have to edit the template and adjust it for your needs.

Go to sk111013  here

And use the terrafrom template: "Security Management Server & Security Gateway (Standalone Deployment)"